API Keys

API keys authenticate merchant backend requests to HesabPay gateway APIs.

Get Your API Key

To begin integrating HesabPay into your application, the first step is to obtain an API key. This key authenticates and authorizes your application to interact with HesabPay gateway services.

Access API Key Management

1. Sign in to the HesabPay sandbox developer portal.
2. Navigate to the Developer section in the sidebar.
3. Click the API Key tab.

Generate API Key

After you access the API key section, generate a new API key.

Keep this key confidential. It should be stored only in secure server-side configuration and must not be exposed publicly.

Authorization Header

When calling HesabPay APIs, append API-KEY before your API key in the Authorization header.

Authorization: API-KEY your_api_key_here

Security Best Practices

• Keep your API key secure and never commit it to version control.
• Store it in environment variables or secure configuration.
• Never expose it in client-side code or public repositories.
• Regenerate your key if you suspect it has been compromised.
• Disable unused keys.
• Use logs to track integration errors without exposing the key value.